CVE-2022-38672: Medium severity android vulnerability
Published Oct 14, 2022
·Updated
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Affected Software
33 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Oct 14, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-38672?
CVE-2022-38672 is classified as a high severity vulnerability due to a possible out of bounds write that can lead to local denial of service in the kernel.
2
How do I fix CVE-2022-38672?
To fix CVE-2022-38672, update your Android device to the latest version provided by Google for your specific device.
3
Which versions of Android are affected by CVE-2022-38672?
CVE-2022-38672 affects Android versions 10.0, 11.0, and 12.0.
4
What type of vulnerability is CVE-2022-38672?
CVE-2022-38672 is a kernel vulnerability related to a missing bounds check in the face detect driver.
5
Can CVE-2022-38672 lead to remote attacks?
CVE-2022-38672 is a local vulnerability, meaning it does not allow remote attacks but can allow a local user to cause a denial of service.